Threat database

413 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Low	3.3	EPSS <0.1%	CVE-2025-21024Smart View · Use of Implicit Intent for Sensitive Communication Low3.3EPSS <0.1%2025-08-06CVE Database V5CVE-2025-21024 Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information. EPSS <0.1%Vulnerability Samsung Mobile #cwe-927 Germany+7	CVE Database V5	2025-08-06
Low	3.3	EPSS 0.1%	CVE-2025-21023WcsExtension for Galaxy Watch · Improper Access Control Low3.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21023 Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+7	CVE Database V5	2025-08-06
Low	3.3	EPSS 0.1%	CVE-2025-21022Galaxy Wearable · Improper Access Control Low3.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21022 Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+6	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.1%	CVE-2025-21021Blockchain Keystore · Out-of-bounds Write Medium5.7EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21021 Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-08-06
Medium	5.7	EPSS 0.1%	CVE-2025-21020Blockchain Keystore · Out-of-bounds Write Medium5.7EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21020 Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21019Samsung Health · Improper Authorization Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21019 Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability. EPSS 0.1%Vulnerability Samsung Mobile #cwe-285 Germany+9	CVE Database V5	2025-08-06
Medium	4.4	EPSS 0.1%	CVE-2025-21018Blockchain Keystore · Out-of-bounds Read Medium4.4EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21018 Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-125 Germany+7	CVE Database V5	2025-08-06
Medium	6.3	EPSS 0.1%	CVE-2025-21017Blockchain Keystore · Out-of-bounds Write Medium6.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21017 Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. EPSS 0.1%Vulnerability Samsung Mobile #cwe-787 United States+11	CVE Database V5	2025-08-06
Medium	4.3	EPSS 0.2%	CVE-2025-21016Samsung Mobile Devices · Improper Access Control Medium4.3EPSS 0.2%2025-08-06CVE Database V5CVE-2025-21016 Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers to use the privileged APIs. EPSS 0.2%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	4.0	EPSS 0.2%	CVE-2025-21015Samsung Mobile Devices · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium4.0EPSS 0.2%2025-08-06CVE Database V5CVE-2025-21015 Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege. EPSS 0.2%Vulnerability Samsung Mobile #cwe-22 Germany+9	CVE Database V5	2025-08-06
Medium	4.3	EPSS 0.1%	CVE-2025-21014Samsung Mobile Devices · Improper Export of Android Application Components Medium4.3EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21014 Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information. EPSS 0.1%Vulnerability Samsung Mobile #cwe-926 Germany+7	CVE Database V5	2025-08-06
Medium	6.2	EPSS 0.1%	CVE-2025-21013Samsung Mobile Devices · Improper Access Control Medium6.2EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21013 Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to outdoor exercise and sleep time. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21012Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21012 Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	5.5	EPSS 0.1%	CVE-2025-21011Samsung Mobile Devices · Improper Access Control Medium5.5EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21011 Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information related to motion and body sensors. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	6.0	EPSS 0.1%	CVE-2025-21010Samsung Mobile Devices · Improper Privilege Management Medium6.0EPSS 0.1%2025-08-06CVE Database V5CVE-2025-21010 Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account. EPSS 0.1%Vulnerability Samsung Mobile #cwe-269 Germany+7	CVE Database V5	2025-08-06
Medium	4.0	EPSS 0.1%	CVE-2025-20990Samsung Mobile Devices · Improper Access Control Medium4.0EPSS 0.1%2025-08-06CVE Database V5CVE-2025-20990 Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier. EPSS 0.1%Vulnerability Samsung Mobile #cwe-284 Germany+9	CVE Database V5	2025-08-06
Medium	6.1	EPSS 0.5%	CVE-2025-53082Data Management Server · Relative Path Traversal Medium6.1EPSS 0.5%2025-07-29CVE Database V5CVE-2025-53082 An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses. EPSS 0.5%Vulnerability Samsung Electronics #cwe-23 Germany+7	CVE Database V5	2025-07-29
Medium	6.4	EPSS 0.4%	CVE-2025-53081Data Management Server · Path Traversal Medium6.4EPSS 0.4%2025-07-29CVE Database V5CVE-2025-53081 An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses. EPSS 0.4%Vulnerability Samsung Electronics #cwe-22 Germany+6	CVE Database V5	2025-07-29
High	7.1	EPSS 0.3%	CVE-2025-53080Data Management Server · Path Traversal High7.1EPSS 0.3%2025-07-29CVE Database V5CVE-2025-53080 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem EPSS 0.3%Vulnerability Samsung Electronics #cwe-22 Germany+9	CVE Database V5	2025-07-29
Medium	4.9	EPSS 0.5%	CVE-2025-53079Data Management Server · Absolute Path Traversal Medium4.9EPSS 0.5%2025-07-29CVE Database V5CVE-2025-53079 Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files EPSS 0.5%Vulnerability Samsung Electronics #cwe-36 Germany+7	CVE Database V5	2025-07-29

Showing 321–340 of 413 results